Well f-prot have picked 5 of bagle-j in the last 3 minuttes on one of my servers so...
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Randall Scott > Sent: 3. mars 2004 18:48 > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] New virus Bagle.J can't be caught > by some standard virus scanners > > I have yet to see any AV pickup Bagle.J. I've tried Norton, > Trend, F-Prot, > McAffee and Vexira with no success. > > Randy > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of R. > Scott Perry > Sent: Wednesday, March 03, 2004 11:35 AM > To: [EMAIL PROTECTED] > Subject: Re: [IMail Forum] New virus Bagle.J can't be caught by some > standard virus scanners > > > > >I definately have the zip file with the password and Trend's email > >antivirus does catch it as well as their enterprise desktop > protection, > >Officescan. > > You haven't provided enough information to determine whether > you are just > as confused as everyone else, or whether you know what you > are doing and > have determined something very useful to know. > > Specifically, YOUR (and everyone else's) mailserver AV > program will detect > "static" viruses in encrypted .ZIP files. They will also all > detect any > encrypted viruses after they have been decrypted manually. > They will also > all detect viruses such as Bagle.J that appear in both > non-encrypted files > and in encrypted files, but will *only* detect them in the > non-encrypted > files. > > If you proof of a mailserver AV program catching a non-static > virus (such > as Bagle.J) in an encrypted .ZIP file, this would be news > indeed. However, > you would need to check the CRCs of the files within the .ZIP > files to make > sure that they are not the same. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers > since 2000. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
